nanog mailing list archives
Re: smurf amp nets
From: "Craig A. Huegen" <chuegen () quadrunner com>
Date: Sat, 13 Jun 1998 12:02:12 -0700
On Sat, Jun 13, 1998 at 09:19:13AM -0700, ken emery wrote: ==>Solaris also has this ability. You need to use /usr/sbin/ndd utility to ==>turn this off. The RFC's say that responding to directed broadcast should ==>be on (this has been hashed out here before) so the *nix vendors leave it ==>enabled in the default config. This is incorrect. The RFC (1122, section 3.2.2.6), states: --- An ICMP Echo Request destined to an IP broadcast or IP multicast address MAY be silently discarded. DISCUSSION: This neutral provision results from a passionate debate between those who feel that ICMP Echo to a broadcast address provides a valuable diagnostic capability and those who feel that misuse of this feature can too easily create packet storms. --- There is no SHOULD in there. www.quadrunner.com/~chuegen/smurf.txt has a few OS vendors who have either turned replies off by default or have provided an option. /cah
Current thread:
- smurf amp nets Jon Lewis (Jun 12)
- Re: smurf amp nets Michael Dillon (Jun 12)
- Re: smurf amp nets Jon Lewis (Jun 12)
- Re: smurf amp nets Michael Dillon (Jun 13)
- Re: smurf amp nets Jared Mauch (Jun 13)
- Re: smurf amp nets Mikael Abrahamsson (Jun 13)
- Re: smurf amp nets Karl Denninger (Jun 13)
- Re: smurf amp nets ken emery (Jun 13)
- Re: smurf amp nets Craig A. Huegen (Jun 13)
- Re: smurf amp nets Jon Lewis (Jun 12)
- Re: smurf amp nets Craig A. Huegen (Jun 13)
- Re: smurf amp nets Michael Shields (Jun 13)
- Re: smurf amp nets Michael Dillon (Jun 12)
- Re: smurf amp nets Oystein Homelien (Jun 14)
- Re: smurf amp nets Eric McClelland (Jun 13)
- <Possible follow-ups>
- Re: smurf amp nets Oystein Homelien (Jun 15)
- Smurf Amp Nets Andrew Herdman (Jun 17)
- Re: Smurf Amp Nets Jon Lewis (Jun 17)
- Re: Smurf Amp Nets Oystein Homelien (Jun 18)
- Re: Smurf Amp Nets Jon Lewis (Jun 17)
- Re: Smurf Amp Nets Jon Lewis (Jun 17)
- RE: Smurf Amp Nets Morgan Sarges (Jun 18)